Hi, Has the EG ever discussed JPA/JPQL support for the database identity store? JPA is already used in most applications, and the database JNDI already has to be set on persistence.xml (where there's

NotificationMeeting Invite Will Hopkins has invited you to JSR-375 Expert Group MeetingDate:Thu, Jul 06, 2017Time:3:00 PM - 5:00 PM EDTLocation:Zoom - details in descriptionOrganizer:Will HopkinsAtten

Hi All, The issue is already mentioned a few times when I gave a talk and is also logged as an issue in our GitHub https://github.com/javaee-security-spec/soteria/issues/76. I think we cannot specify

Hi, Here are my thoughts about the current draft of the spec. Some of them are very subjective and some are about rewording phrases that I may have misunderstood due to my poor English. Page 4 - Cont

I've gotten some feedback on the default group -> role mapping that I'd like to share with the EG: The first is some concern about the impact of a default mapping on security.

I've made a number of API changes as discussed during the EG call last week. I plan to submit the changes as part of the PFD submission today, so if anyone has comments please let me know ASAP

Hi Werner, Linda and I sync'd up on that and I believe the two specs are consistent, although the EE 8 spec obviously doesn't go into as much detail and doesn't list every API.

A couple of announcements: The Public Review Ballot passed, with 21 yes votes, 1 no vote, and 3 who didn't vote at all. The no vote was from JetBrains; I have reached out

Artifacts are now published in the "releases" repository at maven.java.net. -- Will Hopkins | WebLogic Security Architect | +1.781.442.0310 Oracle Application Development 35 Network Drive, B

There is one EC no vote due to lack of effectively JWT support. I see Rudy has done some work very recently: - https://github.com/rdebusscher/soteria-jwt Scott has mentioned it recently as well, but

EG, Trying to get a sense of how much work is left to get soteria updated to match the PFD version of the spec. A good chunk is already done, but I'd like to check on the following

Hi, At least before Proposed Final Draft I was wondering, if a move to the official GitHub organization for Java EE https://github.com/javaee was planned any time soon? If it isn't done now, then most

I thought I sent this out yesterday, but forgot to copy the list -- just as well that I wasn't able to complete the migration last night, although I did get started on the security-spec repo.

So I added support for group lookup via memberOf to the PFD version of the spec. Any EG members know whether it's possible to configure Unbounded or OpenDJ to support memberOf, and,

The repo migration is complete. Please take the time to read this email completely, as it explains how access to the repos works now, and what you'll need to know/do in order to contribute goi

Hi Will, Can you also add me to the Java EE Organization and the "Java EE Security Team" just like all the other active EG members and contributors? Thanks Rudy

Hi, I noticed this commit: https://github.com/javaee-security-spec/soteria/commit/421b6f001c31cd3d64bad0b0f62807ebbb1c7712 Where the comment said "bundle" is needed for GF integration. However JSF/Moj

NotificationMeeting Invite Will Hopkins has invited you to JSR-375 Expert Group MeetingDate:Mon, Jul 24, 2017Time:2:00 PM - 4:00 PM EDTLocation:Zoom -- see below for detailsOrganizer:Will HopkinsAtten

EG: I'd like to meet again, either late this week (Thursday/Friday) or early next week (Monday/Tuesday) It seems like early afternoon EDT/early evening CET works best for

Hi, I was looking for the @LoginToContinue annotation info within the spec. I see that it is only mentioning that the 2 Form definition annotations need such a member. But there is no description of t